CVE-2016-0707

Apache Ambari CVE-2016-0707 affects the Ambari agent prior to 2.1.2. The vulnerability arises from weak permissions on the /var/lib/ambari-agent/data and /var/lib/ambari-agent/keys directories, allowing local users to read files and obtain sensitive information. The issue is documented with a fix...